In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS
Published December 20, 2024.
Jetbrains Teamcity